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II. AMENDMENTS 



Th 



application 



1 . (Currency amended) A computer implemented method for reviewing a business process 
to identify and address risks , comprising the steps of: 



template 
template , 



providing a business process; 

identifying risks in the business process as control points; and 
arranging information pertaining to the control points in a standard fomiat usin^ a 
i tnd storing the template in a computer database to provide subsequent access to the 



TO THE CLAIMS 

following listing of claims repl aces all prior versions, and listings, of claims in the 



2. (OrigirUl) The method of claim l t further comprising the steps of: 
identifying actions to address the risks; 
at ranging the identified actions in the template; and 
p< ?rforming an audit using the template. 

3. (Origifaa)) The method of claim I, wherein the step of identifying risks comprises the step of 
implemeiting a set of tests to identify risks in the business process. 

4. (Original) The method of claim 1, wherein the information comprises: 
aj set of tests, wherein the set of tests identi fy risks in the business process; and 

set of actions, wherein the set of actions address the risks. 
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at;st 



an 



and stor ing. 



5. (Original) The method of claim 4, wherein the information further comprises: 
business process; 

entity, wherein the test entity performs the set of tests; 
action entity, wherein the action entity performs the set of actions; and 
au|dit details. 

6. (Origirjal) The method of claim 5, wherein the information further comprises: 
a Control point name; 
control point revisions; 
background information; and 

control point frequency. 



A com puter implemented method for reviewing a business process 
and address risks , comprising the steps of: 



7. (Currently amended) 
to identi] V 



pjroviding a business process; 
implementing a set of tests to identify risks in the business process as control points; 
identifying a set of actions to address the identified risks; and 

arranging the set of tests and the identified actions in a standard format usinfta template, 
th<> tem plate in a computer database to nrovide su bsequent access to the template. 



8. (Original) The method of claim 7 ? wherein the set of tests and the set of actions comprise 
control joint information. 
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9. (Curreni ly amended) The method of claim 7, further comprising the step[[s]] of[[:]] 



6to& 



acc 



essing the stored template to perform an audit. 



10. (Currently amended) A computer implemented method for reviewing a business process 
to identify and address risks, comprising the steps of: 



09/884,095 



providing a business process; 

implementing a set of tests to identify risks in the business process as control points; 
identifying a set of actions to address the identified risks; 

arranging the business process, the set of tests, and the identified actions in a standard 
format usih& a templat e, and storing the template in a computer database to provide subsequent 



access to t le template : and 



aw litjng the control points based on the template. 

1 1 . (Original) The method of claim 10, wherein the implementing step comprises the step of 
examining) steps in the business process to identify risks. 

1 2. (Currehtly amended) A computer implemented method for arranging business process 
control point information in a template, comprising the steps of: 

arranging a set of tests in a test field, wherein the set of tests identifies ri sks in a business 
process; and 
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arranging a set of action s in an action field, wherein the set of actions addresses the 
identified risks. 

1 3. (Originjal) The method of claim 12, further comprising the steps of: 
arr£}nging a business process in a business process field; 

i a test entity in a test execution Held, wherein the test entity performs the set of 



tests; 



arranging ; 



arranging ; 
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; an action entity in an action execution field, wherein the action entity performs 
the set of actions; and 

arranging audit details in an audit field. 

14. (Original) The method of claim 13, further comprising; 
arranging a control point name in a name field; 
arranging control point revisions in a revision field; 
arranging background information in an information field; and 
arra lging a control point frequency in an interval field. 

1 5. (Curren ly amended) The method of claim 12, further comprising the step[[s]J of[[:]] 
performing an audit based on the stored template. 

16. (Currentpy amended) A computer implemented method for arranging business process 
control point information in a template, comprising the steps of: 
09/884,095 Page 5 of 15 
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armnging a business process in a business process field; 

aminging a set of tests in a test field, wherein the set of tests identifies risks in the 
business pfocess; and 

arranging a set of actions in an action field, wherein the set of actions addresses the 
identified fisks. 

1 7. (Currently amended) The method of claim 1 6, further comprising the steps of: 

; a test entity in a test execution field, wherein the test entity performs the set of 



arranging i 



tests; 



and 
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; an action entity in an action execution field, wherein the action entity performs 
the set of Actions; and 

>ing audit details in an audit field; 
stcjring the template in a computer database to provide subsequent access to the template ; 



arranging i 



arranging i 



pe forming an audit based on the stored template. 



18. (Origihal) The method of claim 17, further comprising: 
arranging a control point name in a name field; 
arranging control point revisions in a revision field; 
ananging background information in an information field; and 
arranging a control point frequency in an interval field. 
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19. (Original) A template for arranging business process control point biformation, comprising: 
a t^st field for arranging a set of tests, wherein the set of tests identifies risks in a business 



process; 
an 

identified 



add 



iction field for arranging a set of actions, wherein the set of actions addresses the 



risks. 



20. (Qrignla]) The template of claim 19, further comprising: 

a b jsiness process field for arranging a business process; 

a tctst execution field for arranging a test entity, wherein the test entity performs the set of 



tests; 

an 

performs 
an 
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action execution field for arranging an action entity, wherein the action entity 
the set of actions; and 
audit field for arranging audit details. 



21. (Original) The template of claim 20, further comprising: 
a r(ame field for arranging a control point name; 
a revision field for arranging control point revisions; 
an information field for arranging background information; and 
an interval field for arranging a control point frequency. 

22. (Original) The template of claim 19, wherein the risks comprise control points, and wherein 
the set of tests and the set of actions comprise control point information* 
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23. (Original) 

a bpsmess 
a 

business 



an 



A template for arranging business process control point information, comprising: 
process field for arranging a business process; 
field for arranging a set of tests, wherein the set of tests identifies risks in tbe 
; and 

action field for arranging a set of actions, wherein the set of actions addresses the 



itest 



pjocess; 



identified risks. 

24. (Origin|aI) The template of claim 23, further comprising: 

a telst execution field for arranging a test entity, wherein the test entity performs the set of 



tests; 

an 

performs 
an 
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{;ction execution field for arranging an action entity, wherein the action entity 
tfte set of actions; and 
Audit field for arranging audit details. 



25. (Originpl) The template of claim 24, further comprising: 
a n^me field for arranging a control point name; 
a revision field for arranging control point revisions; 
an information field for arranging background information; and 
an interval field for arranging a control point frequency. 

26. (Original) A template for arranging business process control point information, comprising: 
a bijsiness process field for arranging a business process; 
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poifit 
an 
a 
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a tdst field for arranging a set of tests, wherein the set of tests identifies ri sks in the 
business piocess steps; 

an action field for arranging a set of actions, wherein the set of actions addresses the 
identified if sks; 

a tejst execution field for arranging a test entity, wherein the test entity performs the set 
of tests; 

an action execution field for arranging an action entity, wherein the action entity 
performs ttye set of actions; and 

an Audit field for arranging audit details. 

27. (Original) The template of claim 26, further comprising: 
a n$roe field for arranging a control point name; 
a revision field for arranging control point revisions; 
an Information field for arranging background information; and 
an interval field for arranging a control point frequency. 



28. (Originjal) A program product stored on a recordable medium for arranging business process 
control point information in a template, comprising: 

interface for receiving business process control point information; 
template for arranging the received information, wherein the template comprises: 
a letst field for arranging a set of tests, wherein the set of tests identifies risks in a business 
process; and 
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ancme 



an 



an 
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an fi ction field for arranging a set of actions, wherein the set of actions addresses the 
identified r $ks 

29. (Origin il) The program product of claim 28, wherein the template further comprises: 
a business process field for arranging a business process; 

a tefct execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 

an dction execution field for arranging action entities, wherein the action entity performs 
the set of actions; and 

an dudit field for arranging audit details. 

30. (Original) The program product of claim 29, wherein the template further comprises: 
field for arranging a control point name; 

a revision field for arranging control point revisions; 
i information field for arranging background information; and 
i Nerval field for arranging a control point frequency. 
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